WooCommerce Security Testing Expert Needed for a Plugin
Budget: $250 – $750 AUD
We’re looking for a skilled security professional to be able conduct both simulated and “real” velocity/card attacks on the checkout pages of several WooCommerce online stores we manage, by bypassing the security which is intended to prevent this. Either of these simulated or “real” attacks will be with the permission of the store owner.
We want to understand how you are able to evade the security protection measures already in place at a software level. Specifically, a plugin which is designed to prevent velocity attacks. We also need to understand whether the cause of the issue is related to the plugin, or, other website vulnerabilities.
The commonality between the 3 sites you review will be that they all have WooCommerce for their online store and they all use the same software to prevent velocity attacks.
Key Tasks:
- Comprehensive testing to identify checkout vulnerabilities, with a particular focus on potential vulnerabilities to velocity/card attacks.
-A full report of the vulnerabilities allowing velocity attacks on that site.
-Recommendations to resolve the issues, based on the information we provide you with about the software being used.
Please note:
-This is an evaluation of existing site software and its current shortfalls and the outcomes we are looking for here is about software improvement specifically. We are aware that other solutions such as a WAF will give greater protection but that is not the objective of the exercise.
-This project does not include making software changes. We have someone else to do that based on your advice.
Ideal Skills and Experience:
- Extensive experience in website security testing for WooCommerce
- Proficiency with WooCommerce and WordPress platforms
- Expertise in identifying vulnerabilities to velocity/card attacks
- Ability to conduct simulated and real-world testing scenarios
We have set a budget for this, but we are open to recommendations.
Further details will be provided to shortlisted applicants.
Potential for ongoing work.
We want to understand how you are able to evade the security protection measures already in place at a software level. Specifically, a plugin which is designed to prevent velocity attacks. We also need to understand whether the cause of the issue is related to the plugin, or, other website vulnerabilities.
The commonality between the 3 sites you review will be that they all have WooCommerce for their online store and they all use the same software to prevent velocity attacks.
Key Tasks:
- Comprehensive testing to identify checkout vulnerabilities, with a particular focus on potential vulnerabilities to velocity/card attacks.
-A full report of the vulnerabilities allowing velocity attacks on that site.
-Recommendations to resolve the issues, based on the information we provide you with about the software being used.
Please note:
-This is an evaluation of existing site software and its current shortfalls and the outcomes we are looking for here is about software improvement specifically. We are aware that other solutions such as a WAF will give greater protection but that is not the objective of the exercise.
-This project does not include making software changes. We have someone else to do that based on your advice.
Ideal Skills and Experience:
- Extensive experience in website security testing for WooCommerce
- Proficiency with WooCommerce and WordPress platforms
- Expertise in identifying vulnerabilities to velocity/card attacks
- Ability to conduct simulated and real-world testing scenarios
We have set a budget for this, but we are open to recommendations.
Further details will be provided to shortlisted applicants.
Potential for ongoing work.